As a software developer I would have liked to hear what could have been done to prevent this. Obviously not running everything as root to start with.

@FlashbackTeam

Жыл бұрын

Several mistakes were committed: - running everything as root - mounting the root file system as read-write - hardcoding the encryption key - enabling a network service when it's not necessary (we hadn't configured this feature, it is enabled by default) But most importantly, input wasn't sanitised. Notice that it expects a MAC address, which has a very strict and well known format: aa:bb:cc:dd:ee:ff After copying to an intermediate buffer with a limited size (as they did correctly), they should have validated the MAC address before proceeding. This could have easily been done with a regex, such as: ^[a-fA-F0-9]{2}(:[a-fA-F0-9]{2}){5}$ In addition, they could have introduced additional security controls, such as a properly configured firewall, sandboxing, etc.

@supermaster2012

Жыл бұрын

@Ralph Reilly there's a reason for this, it saves manufacturing costs as they can just flash the same exact image over and over and let the device bootstrap when it's booted up for the first time.

@itzurabhi

Жыл бұрын

for the C, C++ devs : -Wall -Wextra -Wconversion -Werror

@TonyLee_windsurf

Жыл бұрын

@@supermaster2012 One can use public key encryption, at lease hide the private key. Harder for hacker to create diff encrypted pkt.

@thoriumbr

Жыл бұрын

@@TonyLee_windsurf You can't "hide" the private key, as the software will need it to decrypt the packet. Hard coding the key is terrible because every single router using the same firmware uses the same key. If the key was saved on a file, and checked and generated if the file was missing, it would not be possible to hack every router without physical access to it first.

It wasn't rushed at all. A perfect explanation at a perfect pace.

@jaimedpcaus1

Жыл бұрын

What was "connected pin to line" what was that? What did he say?

Great work guys! Pedro’s explanation of the team’s process of auditing system calls is exceptional. This kind of breakdown is something I rarely see covered in detail.

My god. I think this is the best channel ive seen so far. These dudes are legit

We absolutely love these kinds of detailed breakdown of your thought process while looking at a target. Definitely continue doing these types of videos

I just found your channel yesterday and I'm really enjoying your videos. The information and quality is unmatched!

That was fantastic and very well put together. Very educational. So excited to see more of this!

This is my new favorite KZread channel full stop. Excellent work guys!

Excellent video. I couldn't stop laughing at the `echo urmom>d` hahaha

This was awesome, and thanks for showing your thought process when discovering this vuln. Hope to learn more from you guys in the future

Congratulations guys. Looking forward to learning more. Thank you for starting this channel 👍🏼👌🏽

explanation in the state of art! Brilliant, and waiting for more, congratulations!

Awesome guys! What a video... very clear and objective. The exploit sending one char at a time was really dope

Thank for sharing this. I like the no-nonsense style. For your first video this is a great piece of work. Like your graphics - a picture says more than thousand words. Must have been a lot of work but it pays back.

the way you created a file one character at a time is so smart . i would have felt so stuck with the 13 characters .

mad respect for you guys, what's better than learning from the bests.

brilliant waiting for more!

I like what you have done there. Very straight forward explenation, and I have to slightly disagree with you saying it was rushed. It was perfect. Longer videos are harder to follow and the amount you put in and the little backstories like being in Laos spiced it up a little. I am looking forward to more of your exploits.

Great work! Looking forward to the next video.

Really nice and clear breakdown guys and congrats on the bounty!

You guys rocked🔥 lot of learning in a single video from hardware to binary, reverse engineering to maintaining access .....😃

Awesome video! Great pace and explanation. The file buildup within the 13 char limit is genius haha. Well done!

You guys did an amazing job in explaining the exploitation process. For a next video I would love to see more on how you reverse engineer/decrypt the code and the process of analyzing it. Thanks for giving back to the community! You rock!

@FlashbackTeam

3 жыл бұрын

Thanks for the feedback! We will show that in detail in future videos. Bear in mind there was a serious reverse engineering effort behind all of this. Most functions in the binary were not even defined, and all symbols are our names (the binary had few symbols).

@Barqi

3 жыл бұрын

@@FlashbackTeam I understand. But what for me personally would be super interesting to see, is how to start turning that binary code into code. I think that there are not that many videos on hardware > code > recognising exploitable functions. Again, thanks for giving back to the community!

@RafaelKarosuo

Жыл бұрын

@@FlashbackTeam I was thinking "how on earth you got all those symbols if the code wasn't compiled for debugging", thanks for the clarification, a lot of effort indeed.

Loved it, great explanation with the reversing, thanks guys!

Awesome work! Wait for more and learn from you.

Blyat, this is the best router exploit video on KZread by a long way! More of this guys ✌️

Amazing content guys. Waiting for more🙃

This is very, very well graphiced exploit explanation. Huge thanks, there are million exploit explanations but i never seen like this one.

idk what I should comment now.. Everything I wanted to say like 'this is awesome' and stuff has been said by everyone.. But I'm still commenting to let you guys know that we really need more of this great content from you guys!! Really appreciate it!!

Thank you guys. Absolutely awesome video! Really well structured and presented.

This video was amazing! Right to the point and I understood everything! thank you!

Hi , Great work guys!!!!!! I just found your channel yesterday and I'm really enjoying your videos !!!!!!!! Everything I wanted to say like 'this is awesome' !!!!!!! Please make longer video about setup your environment and witch program use for exploit for router !

Nice work, thanks for the great deep dive! Keep up the great work on developing that specialty education platform :)

@FlashbackTeam

3 жыл бұрын

Thanks, will do!

Money well deserved! This was just beautiful. Thanks for sharing guys. I'd have to re-watch the reverse engineering part of the system calls a few times to understand what's happening though 😅

That was pretty cool. I will like to see more videos like this one. Also a video of how someone can get started in hardware hacking, tools required will be appreciated

Really enjoyed this explanation. Great job guys

Very cleverly done. I really enjoyed watching 👍

This is amazing. Good job guys!

Nice exploit, even better explanation! Great work.

Great video, first time I've been aware of a reverse shell before really interesting stuff!

The explanation is quite good and making it seem easy. Good guys

Very nice job! Congratulations boys!!!

... fiiiiinally an actually GOOD channel on such topics...

Absolutely fantastic explanation. Really enjoyed it and understood it!

Wow! Thank you so much for your work on this video. Explanations are great for someone starting out like me.

Wow, impressive work guys, learnt so much in a single video. As feedback I would say that it would be cool to have a quick look on the exploiting writing process ;)

@FlashbackTeam

3 жыл бұрын

Thank you for your feedback! We will go into depth on that in the next videos!

@danielmonzon7396

3 жыл бұрын

@@FlashbackTeam u are welcome, can't wait to watch them :P

@KaleshwarVhKaleshwarVh

3 жыл бұрын

@@FlashbackTeam yes, I guess, the length of the video doesn't matter for people who will wanna learn. So go for it.

Great work, love the thought behind constructing the final final in chunks due to the character limitation.

Amazing, cant wait for next video

Really nice work dudes, love the idea of building it one char at a time.

This is amazing! Great work

awesome video! very interesting to watch because you explain it VERY well

Great video and explanation!

ah so late for this, but absolutely worth the watch. Congrats guys on this fantastic job. "Looks juicy" my new favorite phrase :p

Excellent explanation, super cool method of exploit!

I never get tired of your voice ;)

Excellent walkthrough thank you!!

This is the best hardware hacking video I have seen in my life. Thank you!

Great job guys. And great video.

Very inspiring, you both are epic. Thank you for sharing.

thank you guys, great video!

Thank you so much for explaining the process.

Panowie, super robota, jako początkujący embeddeddev bardzo dziękuję za content!

Well done Flashback Team!

Excellent work!

Great video, enjoyed a lot! Clever exploit:)

Loved the experience watching the video. As a n00b, I'm thankful for the details presented and would request that even more videos with even more details would be much appreciated. And wish both of you the very best.Cheers,

great breakdown!

great video loved it !!

Great stuff! Thank you for sharing.

Great Job! Super good video! keep on

Awesome, thanks for sharing it!

It’s awesome guys. It’s very interesting. Thank you for explanation

non-programmer here i love this breakdown. i get to witness the mindset of successfully exploiting a vulnerability (within a 13 character limitation). i actually got it. most of it made sense even to an 'illiterate' bystander like myself. pwn bounty well deserved!

Got damn it congrats flashback team !!!!

Great work guys

was perfect exploit and explaning

Great explanation! Thank you!

Thank you so much for sharing , I learned a lot from this video 🙏

Very cool, nice job, guys.

"urmom" LOL, love how they the used the word in every part of the exploit

Worked , thanks a lot!

Great work!

From a developer sight of view, it makes me now think twice about validation of strings from not trust able sources, as the exploit would break if any function in the call chain would check the input values fully also for injection. Very interesting how "easy" it is to gain access when you reach a specific level of knowledge, very nice video and remote Injection method of the remote shell!

A perfect explanation. Great.

Verry nice job. I don’t understand what you exactly does but it is so a nice idea. I want to learn this. Sooo nice

You guy's are insane, please release nore videos. Highly appreciated

great presentation, very clearly communicated

Great video, thanks for the tips.

Well done, no problem with the video. Thanks for sharing.

Nice video, thanks for sharing :)

Pure genius the writing to a shell script and then executing lol

Great stuff!

Dope and well explained

this was very good!

even this video is more than 10 minutes, I'm take a break from my workload to watch this video nice education video bro, from me who interest on vulnerability hardware

This is a fucking masterpiece ! Great job guys ! You totally worth it !

Your getting a sub from me I love how you go into full detail although I wish you told us what disassembler you used

Very nice video!

Perfect explanation, I'm going to copy the part where you go in motorcycles 😄

Awesome, Thanks for video